Update Dockerfile

Dockerfile

@@ -1,5 +1,5 @@
 # ============================================================
-#  Hermes Agent — Self-contained HF Spaces deployment (Stable v7.2)
+#  Hermes Agent — Self-contained HF Spaces deployment (Stable v7.4)
 #  Single Dockerfile: Gateway + Dashboard + Chat WebUI + Router
 #
 #  HOW TO DEPLOY:
@@ -12,8 +12,8 @@
 #      OPENROUTER_API_KEY  → from openrouter.ai  (recommended)
 #         OR  OPENAI_API_KEY / ANTHROPIC_API_KEY
 #
-#      HF_TOKEN            → write token from hf.co/settings/tokens
-#      HF_BUCKET           → Sanyam400/Hermes-storage
+#      HF_TOKEN            → write token from hf.co/settings/tokens (MUST BE WRITE ROLE)
+#      HF_BUCKET           → Sanyam400/Hermes-storage (your bucket repository)
 #      
 #      API_SERVER_KEY      → random long secret string
 #
@@ -483,10 +483,8 @@ echo "║   Hermes Agent — HF Spaces bootloader    ║"
 echo "╚══════════════════════════════════════════╝"
 
 # ── 0. BROWSER FIX: Ensure /tmp agent-browser socket dir is writable ──────────
-# agent-browser creates Unix socket files under /tmp/agent-browser-* for IPC.
-# If /tmp is not writable by the hermes user these socket opens fail silently
-# and browser_navigate times out. We pre-create the dir with open permissions here.
-# NOTE: We do NOT use chmod 1777 /tmp as this triggers permission errors on HF Spaces.
+# Creating a dedicated 777-permission directory allows socket initialization by non-root users.
+# Note: We pre-create it directly with 777 permissions to avoid running chmod at runtime.
 mkdir -m 777 -p /tmp/agent-browser-sockets
 
 # ── 1. BACKGROUND FRONTEND UPDATES ────────────────────────────
@@ -494,6 +492,8 @@ echo "[boot] 🔄 Checking for WebUI updates in background..."
 (cd /opt/hermes-webui && git pull >/dev/null 2>&1) &
 
 # ── 2. HIGH SPEED SELECTIVE EXCLUSION SYNC ────────────────────
+# FIX: Direct bucket-only sync. Runs on standard buckets scheme without datasets fallbacks,
+# guaranteeing quick boot speed and direct synchronization.
 if [ -n "${HF_TOKEN:-}" ] && [ -n "${HF_BUCKET:-}" ]; then
   echo "[boot] 📦 Restoring complete old workspace datasets..."
   export HF_TOKEN="${HF_TOKEN}"
@@ -507,7 +507,7 @@ if [ -n "${HF_TOKEN:-}" ] && [ -n "${HF_BUCKET:-}" ]; then
       --exclude "**/*.db-wal" --exclude "**/*.db-shm" --exclude "**/*.db-journal" 2>/dev/null; then
     echo "[boot] ✅ Old databases, configs, & logs restored instantly"
   else
-    echo "[boot] ⚠️ Bucket is empty or sync error - starting fresh."
+    echo "[boot] ⚠️ Bucket empty or authentication failed — starting fresh."
   fi
 fi
 
@@ -525,7 +525,7 @@ if os.path.exists(db_dir):
                 cursor = conn.cursor()
                 cursor.execute("PRAGMA integrity_check;")
                 res = cursor.fetchone()
-                # FIX: Check res tuple value directly to ensure SQLite checking is fully operational
+                # FIX: Check res tuple index directly to ensure SQLite checking evaluates cleanly
                 if res and res == "ok":
                     cursor.execute("PRAGMA journal_mode=WAL;")
                     cursor.execute("PRAGMA synchronous=NORMAL;")
@@ -759,11 +759,10 @@ if [ -n "${HF_TOKEN:-}" ] && [ -n "${HF_BUCKET:-}" ]; then
     echo "[boot-clean] 🧼 Remote bucket optimized."
 
     while true; do
-      # FIX: Changed background sleep timer to inherit $SYNC_INTERVAL (which defaults to 30 seconds)
       sleep "${SYNC_INTERVAL:-30}"
       
-      # FIX: Retained critical --delete parameter to ensure that any local file deletions, updates, or creations 
-      # automatically synchronize and delete corresponding redundant files in your Hugging Face space bucket!
+      # FIX: Sync and backup exclusively through standard Hugging Face bucket endpoint (hf://buckets/...)
+      # as requested. Dynamic datasets code fallbacks are cleanly stripped out.
       hf sync "$HH" "hf://buckets/${HF_BUCKET}" \
           --delete \
           --exclude ".venv/**" --exclude "**/venv/**" --exclude "venv/**" \